CVE-1999-1139

CVE-1999-1139 describes a local privilege escalation vulnerability in the Character-Terminal User Environment (CUE) of HP-UX 11.0 and earlier. An attacker can exploit this flaw by performing a symlink attack on the IOERROR.mytty file, allowing them to overwrite arbitrary files and ultimately gain root privileges. This vulnerability carries a high CVSS score of 7.2, indicating a critical impact with full confidentiality, integrity, and availability compromise, requiring only local access and low attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decades-old CVE.